Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Cisco Application Policy Infrastructure Controller (APIC) 4.1(1i) Clear all filters
TI-2019-01461 CVE-2019-1838 · GHSA-9m3m-m53p-v8q2

Cisco Application Policy Infrastructure Controller Web-Based Management Interface Cross-Site Scripting Vulnerability

Priority LOW 26

A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a us…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0081 Published 2019-05-03 Fixed in 4.1(1i) CWE-79
TI-2019-01318 CVE-2019-1692 · GHSA-q7p6-jrrp-5975

Information disclosure in Cisco Application Policy Infrastructure Controller

Priority LOW 32

A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, remote attacker to access sensitive system usage information.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01197 Published 2019-05-03 Fixed in 4.1(1i) CWE-200
TI-2019-01308 CVE-2019-1682 · GHSA-w5xg-prmx-v5rm

Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability

Priority LOW 36

A vulnerability in the FUSE filesystem functionality for Cisco Application Policy Infrastructure Controller (APIC) software could allow an authenticated, local attacker to escalate privileges to root on an affected devic…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00352 Published 2019-05-03 Fixed in 4.1(1i) CWE-264